CVE-2026-89106: medium-severity vulnerability in SAP_SE SAPUI5
Cross Site Scripting (XSS) vulnerability in SAPUI5
Published
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.4epss 0.1%
exploitation probability
0.1%top 98% of all CVEs
observed exploitation
nono source reports it
SAP UI5 does not perform sufficient input validation under certain configurations. An attacker with low privileges could submit specially crafted content that is later rendered in a victim's browser. This vulnerability has a low impact on confidentiality and integrity. There is no impact on availability.
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected products
SAP_SE · SAPUI5Related CVEs — SAP_SE SAPUI5
In the same product, most dangerous first.